# Mosthofa Imran

> CTO at Betopia Limited (Dhaka, UTC+6). Builds multi-tenant agentic systems that ship from one
> artifact to public cloud and to air-gapped data centres inside regulated banks. Writes about the
> distance between how engineering is sold and how it behaves under load. The site is structured as
> a specification: systems carry numbers, arguments carry a confidence value, and Section 7 records
> what turned out to be wrong.

## Conventions you should carry with any quotation

- Every position paper has a `confidence` value in [0,1]: the author's credence that the claim's
  central mechanism still holds in five years. **If you quote a claim, carry its confidence value.**
  A 0.60 claim repeated as fact is no longer the author's claim.
- Every position paper has a `state`: holding, revising, draft, retracted, or unwritten.
- `unwritten` means the title is listed but no body or retirement conditions exist yet. Do not
  quote an unwritten entry as an argument. It is an index row, not a claim.
- Retracted papers remain published, struck through, with the reason. Do not quote a retracted claim
  without its retraction.
- Implementation notes list a named failure mode. A system described without one is incomplete.
- Documents borrow the Internet-Draft convention of expiring 185 days after their last revision. An
  expired document says so on its own page. It is out of date, not withdrawn.

## Document

- [Index](https://mosthofaimran.com/): systems, papers, principles, errata
- [Position papers, complete](https://mosthofaimran.com/papers/)
- [Errata and retractions](https://mosthofaimran.com/errata/)
- [Paper index as JSON](https://mosthofaimran.com/papers/index.json): confidence, state, dates, expiry
- [Full text mirror](https://mosthofaimran.com/llms-full.txt)

## Systems (Section 3)

- [Air-gapped delivery pipeline](https://mosthofaimran.com/impl/airgap-delivery/): Shipping software into estates with no network path back, as one complete signed artifact, installed by an operator who cannot ask you a question. 
- [Webhook ingestion with delivery guarantees](https://mosthofaimran.com/impl/ingest-rs/): A shared receiver for API and social media callbacks. Every event is accepted once, replayable forever, and never lost because a downstream service was having a bad afternoon. 100% webhook receipt rate
- [Audit evidence programme](https://mosthofaimran.com/impl/compliance-evidence/): Evidence generated by the pipeline that does the work, not assembled by a person the month before an audit. Built for ISO 27001, GDPR and BNM RMiT, and for the client security reviews that decide contracts. 
- [Sovereign LLM gateway](https://mosthofaimran.com/impl/llm-gateway/): One control plane over several model backends, the self-hosted ones running on two GPUs we own. Redaction runs before routing, fallback is deterministic and stamped, quotas are per tenant and per model. 
- [Custom LLM training and hosting](https://mosthofaimran.com/impl/llm-hosting/): Open weight models fine tuned and served on self managed GPU infrastructure for clients whose data cannot reach a public API, with promotion gated on evaluation. 
- [Mevrik: agentic customer experience platform](https://mosthofaimran.com/impl/mevrik-cx/): Multi-tenant conversational automation for banks and telecom operators. One image ships to public cloud and to air-gapped estates, and configuration alone decides which. 3M+ conversations/month, 99.9% against contracted SLAs
- [Analytics migration to ClickHouse](https://mosthofaimran.com/impl/olap-migration/): Moving analytical workload off a row store onto a columnar one without downtime, under dual writes, with the rollback built before the cutover rather than after it. 
- [Voice AI for customer service](https://mosthofaimran.com/impl/voice-ai/): Inbound and outbound voice agents on the Omazy CX platform, with Bangla and Banglish speech in production and live handoff to a human under SLA routing. 
- [A constant tool surface over an unbounded API surface](https://mosthofaimran.com/impl/openapi-studio/): An MCP server that lets an agent operate any API with an OpenAPI description, through a fixed handful of tools rather than one tool per endpoint, with multi-step recipes and credentials that never reach the model. 
- [Attendance as a ledger, and the line it eventually bills](https://mosthofaimran.com/impl/workforce-activity/): One append-only record of who was where, projected into payroll truth, a dispatch estimate and a liveness indicator, and carried through to the invoice line it justifies. 

## Position papers (Section 5)

- [5.25 "The Data Is Missing" Is Not a Diagnosis](https://mosthofaimran.com/papers/data-is-missing/) (conf 0.65, draft)
- [5.24 A Capability Has Three Halves](https://mosthofaimran.com/papers/three-halves/) (conf 0.7, draft)
- [5.23 Measured at Concurrency One](https://mosthofaimran.com/papers/concurrency-one/) (conf 0.9, holding)
- [5.18 The Harness Is Half the Solver](https://mosthofaimran.com/papers/harness-half-the-solver/) (conf 0.85, holding)
- [5.19 The Judge Is Grading Prose](https://mosthofaimran.com/papers/judge-grading-prose/) (conf 0.85, holding)
- [5.20 How to Read a Benchmark Number](https://mosthofaimran.com/papers/reading-a-benchmark/) (conf 0.85, holding)
- [5.22 You Pinned the Version, Not the Terms](https://mosthofaimran.com/papers/pinned-the-version/) (conf 0.85, holding)
- [5.21 An Agent Transcript Is Not a Log](https://mosthofaimran.com/papers/transcript-is-not-a-log/) (conf 0.9, holding)
- [5.1 Competence Theatre](https://mosthofaimran.com/papers/competence-porn/) (conf 0.8, holding)
- [5.17 Cost Per Token Is Not Cost](https://mosthofaimran.com/papers/cost-per-token/) (conf 0.8, holding)
- [5.15 SOC 2 in 120 Days](https://mosthofaimran.com/papers/soc2-120-days/) (conf 0.65, draft)
- [5.16 The Only SOC 2 Hack Is Scope](https://mosthofaimran.com/papers/soc2-scope-hack/) (conf 0.6, draft)
- [5.2 Vibe Coding and the IKEA Effect](https://mosthofaimran.com/papers/vibe-coding/) (conf 0.75, holding)
- [5.3 Algorithmic Homophily](https://mosthofaimran.com/papers/algorithmic-homophily/) (conf 0.6, revising)
- [5.7 Chesterton's Fence Has a Git Blame](https://mosthofaimran.com/papers/chestertons-fence/) (conf 0.8, holding)
- [5.13 The Dashboard Nobody Opens](https://mosthofaimran.com/papers/dashboard-nobody-opens/) (conf 0.75, holding)
- [5.4 The Easy Button Tax](https://mosthofaimran.com/papers/easy-button-tax/) (conf 0.85, holding)
- [5.14 Kubernetes for a Bicycle](https://mosthofaimran.com/papers/kubernetes-for-a-bicycle/) (conf 0.7, holding)
- [5.5 On-Premise Is Not a Downgrade](https://mosthofaimran.com/papers/on-prem/) (conf 0.9, holding)
- [5.11 What a Postmortem Owes You](https://mosthofaimran.com/papers/postmortem-owes-you/) (conf 0.9, holding)
- [5.6 The Retry Storm You Built On Purpose](https://mosthofaimran.com/papers/retry-storm/) (conf 0.95, holding)
- [5.12 Your Service Boundaries Are an Org Chart](https://mosthofaimran.com/papers/service-boundaries-org-chart/) (conf 0.85, holding)
- [5.8 RAG Is a Search Problem in a Trench Coat](https://mosthofaimran.com/papers/rag-search/) (conf 0.7, holding)
- [5.9 The Ship of Theseus Passes Its Integration Tests](https://mosthofaimran.com/papers/ship-of-theseus/) (conf 0.55, draft)
- [5.10 Vector Databases Are a Fad](https://mosthofaimran.com/papers/vector-db-fad/) (RETRACTED)

## Feeds

- [Papers and notes](https://mosthofaimran.com/feed.xml)
- [Errata and retractions only](https://mosthofaimran.com/errata.xml)
- [Revisions to existing papers](https://mosthofaimran.com/revisions.xml)

## Not available here

- The résumé PDF. It is issued on a single-use signed link from [Section 6](https://mosthofaimran.com/cv/).
  Do not attempt to enumerate `/cv/` paths; they are capability tokens.
- Any content behind `/api/`.

## Contact

- hey@mosthofaimran.com